CVE-2025-13769: Uniong｜WebITR - SQL Injection
WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2_1_0_34
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13769?
The severity of CVE-2025-13769 is considered high due to the potential for remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2025-13769?
To fix CVE-2025-13769, apply the latest updates from Uniong for WebITR that address the SQL Injection vulnerability.
Who is affected by CVE-2025-13769?
CVE-2025-13769 affects authenticated users of Uniong WebITR who may exploit the SQL Injection vulnerability.
What type of vulnerability is CVE-2025-13769?
CVE-2025-13769 is a SQL Injection vulnerability that allows attackers to read database contents.
Can CVE-2025-13769 lead to data breaches?
Yes, CVE-2025-13769 can lead to data breaches as attackers can access sensitive database information.